CVE-2022-40119

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the searchterm parameter at /net-banking/transactions.php...

CVE-2022-40119

Online Banking System v1.0 contains an SQL injection vulnerability in the search_term parameter of /net-banking/transactions.php. The underlying issue is unsanitized user input leading to potential disclosure/integrity/availability impact (CVSS v3.1 base score 9.8, CRITICAL). Exploitation details...

CVE-2022-40118

Online Banking System v1.0 contains an SQL injection vulnerability in /net-banking/send_funds_action.php via the cust_id parameter. Root cause: unsanitized input enabling SQL injection. Impact per CVSS: base score 9.8 (CRITICAL); AttackVector NETWORK; AttackComplexity LOW; PrivilegesRequired NONE...

CVE-2022-40117

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/deletecustomer.php...

CVE-2022-40116

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/beneficiary.php...

CVE-2022-40117

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/deletecustomer.php...

CVE-2022-40117

CVE-2022-40117 affects Online Banking System v1.0, with a SQL injection in the cust_id parameter of /net-banking/delete_customer.php. Root cause: unsafe SQL handling in PHP/MySQL leads to potential unauthorized data access/modification. Impact per metrics: base CVSS 3.1 score 9.8 (CRITICAL); atta...

CVE-2022-40116

CVE-2022-40116 affects Online Banking System v1.0. The vulnerability is a SQL injection in the search parameter of /net-banking/beneficiary.php, arising from improper input handling. CVSSv3.1 indicates NETWORK attack vector, no authentication, with 0 user interaction and high impacts to confident...

CVE-2022-40115

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/deletebeneficiary.php...

CVE-2022-40115

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/deletebeneficiary.php...

CVE-2022-40115

CVE-2022-40115 affects Online Banking System v1.0, with a SQL injection vulnerability in /net-banking/delete_beneficiary.php via the cust_id parameter. The CVSS v3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base score 9.8; CRITICAL). Exploitation requires network access, no user interaction...

CVE-2022-40114

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/editcustomer.php...

CVE-2022-40114

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/editcustomer.php...

CVE-2022-40114

CVE-2022-40114 : Online Banking System v1.0 contains a SQL injection in the cust_id parameter of /net-banking/edit_customer.php. Root cause: unsanitized input in the parameter leads to arbitrary SQL execution. Impact per CVSS: Confidentiality, Integrity, and Availability all HIGH. Exploitation de...

CVE-2022-40113

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/sendfunds.php...

CVE-2022-40113

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/sendfunds.php...

CVE-2022-40113

CVE-2022-40113 affects Online Banking System v1.0. A SQL injection vul nerability exists in the cust_id parameter of /net-banking/send_funds.php, caused by unsafeguarded input leading to data access compromise. The CVSSv3.1 base score is 9.8 (CRITICAL) with network attack vector, no privileges, n...

Online Banking System SQL注入漏洞

Online Banking System is an online banking system developed using PHP and MySQL. v1.0 of Online Banking System has a security vulnerability that stems from a SQL injection issue in the custid parameter in the /net-banking/sendfunds.php location. No detailed vulnerability details are available at...

Online Banking System SQL注入漏洞

Online Banking System is an online banking system developed using PHP and MySQL. v1.0 of Online Banking System is vulnerable due to a SQL injection issue in the custid parameter in the /net-banking/editcustomer.php location . No details of the vulnerability are available at this time...

Online Banking System SQL注入漏洞

Online Banking System is an online banking system developed using PHP and MySQL. v1.0 of Online Banking System has a security vulnerability that originates in the /net-banking/deletebeneficiary.php location where the custid parameter has SQL injection issue. No detailed vulnerability details are...